COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
X5pVSzSF
dP5yRxpb
Behavioral task
behavioral1
Sample
5bd8af9dea192506e783e79797fc161fc688a3f20790d7a9874b1526cd3db1b3.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5bd8af9dea192506e783e79797fc161fc688a3f20790d7a9874b1526cd3db1b3.dll
Resource
win10v2004-20220812-en
Target
5bd8af9dea192506e783e79797fc161fc688a3f20790d7a9874b1526cd3db1b3
Size
21KB
MD5
64e14013c81b65a4c851c6428123d050
SHA1
d5cc1f684864be63b0ac1fdcaa2db07f22ea09e6
SHA256
5bd8af9dea192506e783e79797fc161fc688a3f20790d7a9874b1526cd3db1b3
SHA512
b19aae9fa235dac1c23405b06bf1cf2b79e289ad971480d5a1ffd60a71b0083a2b42f9019e8db8523bbb8c81c235d71055d7f657640c19f0a123a70bd54d84c6
SSDEEP
384:SpFYxF/CrppXsWppT/K3AnjLxScBF2Ut8Hw75En0qGsoPVQIyyVQ:SYxF/CrphsWp5/dLAcBRgw80vLVoyy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
X5pVSzSF
dP5yRxpb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ